2,042 Posted Topics

Member Avatar for Lee Hassig

Hello, Lee. This will involve more than hoping to find fake programs to delete in your control panel applet. To clear this infection you will have to download a couple of removal tools, but I will only give you safe, verified ones to use. Just so we can see what …

Member Avatar for gerbil
0
112
Member Avatar for emorjon2

Check this value in your registry. At key HKLM\SYSTEM\CurrentControlSet\Control\Nls\CodePage, check that... OEMCP=437. And that it does not change between startups. It is possible for applications to change the codepage via several functions. If it is fixed at the same value each time then somehow your codepage is getting altered internally. …

Member Avatar for gerbil
0
305
Member Avatar for kanoy83

Interesting. I had to experiment to be sure, because account information on the web is conflicting and some of it is quite wrong, and my experience with them was moderate... so on my W7 machine I enabled the Guest account; I also created a new User account, Justonce, logged in …

Member Avatar for solarfinder
0
340
Member Avatar for somjit{}

Shouldn't do any damage. The quality pastes are non-conductive electrically, non-corrosive. The worst it could do is harden a wee bit and make it ever so slightly more difficult to lift the CPU out one day. Interesting about the monitors. I use Core Temp on an Intel CPU... it's just …

Member Avatar for gerbil
2
313
Member Avatar for yvesk
Member Avatar for wmc1956

You might try downloading RKill and ADWCleaner from bleepingcomputer; run RKill first, then without restarting run ADWCleaner and Malwarebytes again. http://www.bleepingcomputer.com/download/rkill/ http://www.bleepingcomputer.com/download/adwcleaner/

Member Avatar for gerbil
0
546
Member Avatar for wmc1956
Member Avatar for Lynn

I think this should give you the guidance you need to remove the message: http://www.techrepublic.com/blog/window-on-windows/adding-messages-to-windows-7s-logon-screen/4390 Or, if you so wish, you can copy and save the following script to your deskto using notepad; name it cleanlogin.bat. Double-click it to run it; you will be asked to confirm the steps. It …

Member Avatar for gerbil
0
497
Member Avatar for Techno22

So from Safe Mode, if you look in \Windows, are there $NtUninstallKB.... folders dated yesterday? Open them, open spuninst folder and dclick spuninst.exe.

Member Avatar for Techno22
0
346
Member Avatar for rezaEtemadi
Member Avatar for christina_1

If you can log on, then run chkdsk [checkdisk] by rclicking drive, then going Properties, Tools.

Member Avatar for gerbil
0
113
Member Avatar for clayden

Nooo.... it's a malware issue!! Run RKill by Grinler. http://download.bleepingcomputer.com/grinler/rkill.com Follow up with http://download.bleepingcomputer.com/farbar/FSS.exe Post the log.

Member Avatar for gerbil
0
154
Member Avatar for bgrimwade

Re the removal of this key, O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)... I consider the proper course to be to restore the file, a part of maintaining system security, and to NOT delete the launch key. DIMSNTFY.DLL The Digital Identity Management Service Notification Handler starts via Winlogon …

Member Avatar for gerbil
0
221
Member Avatar for sanbio

Sankha, this should do the trick. I have included a link as a way of acknowledging the author of the fix. Links - http://www.dougknox.com/xp/file_assoc.htm ==Please copy the text in the box to a notepad [format/wordwrap unchecked] and save as fixkey.reg, as type "all files", to your desktop; dclick it to …

Member Avatar for gerbil
0
186
Member Avatar for jacksonbird03

Starting, I belive, with XP, only Windows' boot files must be on a primary partition ["system" drive must be primary], but the remainder [the "boot" drive], of the OS may be on a logical volume. W7 has the option of a System Reserved primary for all boot files and loader. …

Member Avatar for garyson02
0
168
Member Avatar for adyhood

You might use TestDisk by Grenier to see if it recognises the disk spaces correctly. If it does then you can rewrite the MBR with that information. Its Deep Search might pick up the correct boundary. If not, then a tool like PTedit32 may be the one to use. For …

Member Avatar for gerbil
0
543
Member Avatar for emjuan

Pretty much, just search with this term:- code: 80072EE2 A couple of links which may help... http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update/windows-update-error-code-80072ee2/fb87f203-69d9-4cd5-bbb1-ba8d0781be3e http://www.google.com.au/url?sa=t&rct=j&q=code%3A%2080072ee2&source=web&cd=1&ved=0CC0QFjAA&url=http%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen%2Fw7itprosecurity%2Fthread%2F11f7f7e5-a826-4e94-af6a-8f5db3206d22&ei=9fKnUdDAJaewiQeJuIDQAQ&usg=AFQjCNFs3zh7a01XICqzY7g1d4HjSTL26g&bvm=bv.47244034,d.aGc You're not alone. Btw, you must use IE for Wupdate. Chrome etc just will not work.

Member Avatar for tigerbright
0
182
Member Avatar for cool_zephyr

Check also what system restore size is set to, and the pagefile specification, if there is one on your D: drive. A program like MyDefrag will identify the "stolen" space for you.

Member Avatar for BigPaw
0
897
Member Avatar for seblake

The 7 hive files are DEFAULT SAM SECURITY SOFTWARE SYSTEM COMPONENTS BCD-Template To do the job, boot from your W7 inst disk. Choose the option to Repair your Computer. Choose a recovery tool : Command Prompt Then enter these commands... cd Windows\System32\Config md Temp copy BCD-Template Temp ren BCD-Template BCD-Template.bak …

Member Avatar for gerbil
0
361
Member Avatar for ganges
Member Avatar for Ancient Dragon

Ancient, I'm using IE6 [rarely], but I'm going to guess nothing much has changed... :) What if you physically edit this key [or sim, for IE10] to reflect your homepage URL? Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] So: "Start Page"="http://www.rottentomatoes.com/m/dogville/" Or check that it at least reflects the home …

Member Avatar for Ancient Dragon
0
180
Member Avatar for slwf

MBAM is usually right on top of Vundo. All you have are the two Searchscopes keys, which were removed. GMER looks clean, no suspicious keys or services in DDS.

Member Avatar for gerbil
0
474
Member Avatar for spyder2099
Member Avatar for leomartintsa
0
487
Member Avatar for Magwheels

Is this the type of Java popup to which you refer? ![6d9e50bca0ccf0056b834e3087b475f9](/attachments/large/0/6d9e50bca0ccf0056b834e3087b475f9.JPG "6d9e50bca0ccf0056b834e3087b475f9") "i have windows 7 and do not want to run java programs" . Perhaps, but the fact that you are seeing that popup means that you are running Java [it is installed on your machine], and that …

Member Avatar for gerbil
0
815
Member Avatar for nelsonjayac

Boot into the one you want to keep. If the two Windows are in the one partition, eg. C: drive then there will be Windows and Windows(2)- identify the surplus windows [best if it is Windows(2) because that (2) will carry over into other stuff....] and delete its Windows folder. …

Member Avatar for RMoralesj
1
164
Member Avatar for Shane_2

You forgot already where you honeymooned? Sheesh. Too much of something. You got bigger problems than hacking someone's email.

Member Avatar for caperjack
0
193
Member Avatar for Its.Obi

By now you have likely read up on Sality and know that you have some hard choices and work ahead of you. Yes, it is curable, but while protected system executables will not be infected, many other system files may be. Certainly the executables of other softwares will be infected …

Member Avatar for RoyinForest
0
349
Member Avatar for CityThrille

Because you're having fun playing with it, I'll keep it simple: You should search $WEBHAX.NFC,crys - possibly a phone hack. Note spelling. http://news.softpedia.com/news/Microsoft-Experts-Details-Clever-Propagation-Mechanism-of-Gamarue-Malware-333499.shtml http://blogs.technet.com/b/mmpc/archive/2013/02/27/the-strange-case-of-gamarue-propagation.aspx Just delete the files and reg entries, there are no protections. The second link gives you clues as to how. TrustedInstaller.exe is used by the Windows …

Member Avatar for alexalbert
0
262
Member Avatar for kdlong

Lessee... just so that you get the correct screen of options, restart your sys and begin pressing F8 as BIOS runs, and you should lob into a black screen Advanced Options Boot Menu with one of them being "Disable automatic restart on system failure". Choose that one. Restart your system. …

Member Avatar for Webville312
0
370
Member Avatar for Hikki_Passion

It seems as if you are missing a registry key which launches the explorer shell. You can paste the line below into the Start, Run window, or alternatively, into a cmd window, and press Enter - it will add/correct the respective entry in your registry. The change will be apparent …

Member Avatar for gerbil
0
1K
Member Avatar for Helper guy

It would be handy if you could tell us the exact Stop Code shown in the blue screen message. To see that, it may be that you must disable automatic restarting after an error: when you start your system, press F8 a few times after hard disk detection - you …

Member Avatar for bonita810
0
121
Member Avatar for techxaidz
Member Avatar for Rockstrdreamer

Go into a darkened room, check your black screen for your displayed page... if faintly there, and it responds normally to your manipulations, then it is your fluoro backlight dying, or its HV ps. Service call.

Member Avatar for Techno22
0
1K
Member Avatar for supercomputer

I'm going with a "broken" BIOS. USB [and PS2, if available] hardware support should just work in BIOS. Perhaps you need to flash.

Member Avatar for Miss M
-1
241
Member Avatar for StefanRafa0
Member Avatar for Sinvicta

Try to start your system in Safe Mode. If successful remove virgin Media. If that does not work, then use your F keys or Delete key to enter BIOS Setup; under Power Mgmnt disable Autorestart. Next time you restart the sys capture [write down] the error codes and message re …

Member Avatar for Mhad
0
230
Member Avatar for johnp9523

Can only guess, but possibly in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services or Control\CriticalDeviceDatabase keys you have a Silicon Images service trying to start. You could search those keys for the words SIL or SILICON. Does the message appear if you start in Safe Mode? You could use a Windows API scanne/monitor to output the …

Member Avatar for gerbil
0
320
Member Avatar for anumash

The tab key measures spaces along a line, from the beginning of the [any] line. Mine in notepad.exe is equivalent to 8 spaces; thus: -a tab- 12345... the "1" would be one tab position along the line. In this browser, on this site, a tab is equivalent to 4 spaces, …

Member Avatar for gerbil
0
145
Member Avatar for Leo G

Is tcpip.sys always the driver mentioned in the stop msgs? You do mention that you are working on the internet when the error occurs...

Member Avatar for Rik_
0
128
Member Avatar for person in need

Mmm... that rather says that explorer thinks that j:\ is a filename [well, that is how it works...], and it will think that right up until it discovers that it is actually something higher up the tree, like a folder or drive letter. So, my guess is that the partition …

Member Avatar for Rik_
0
378
Member Avatar for ganges

The BIOS password? Before running cracks for that, just clear your CMOS memory on the mobo; that's where it is commonly stored. But you might just have a mobo or laptop with the pw stored in non-volatile flash memory, or even on the hdd... search for your model.... in which …

Member Avatar for professor123
0
201
Member Avatar for carl.chisholm

You might copy and save the following as rq2.bat to your desktop, dclick the bat file to run it. Safe or normal mode... reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SytNxobj /f del /f /q C:\Users\Chiz\AppData\Local\Temp\kerlamnc.exe del /f /q C:\Users\Chiz\AppData\Local\kscbnlrs\sytnxobj.exe del /f /q C:\Users\Chiz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sytnxobj.exe del /f /q C:\Users\Chiz\AppData\Local\kscbnlrs Wise, though, because your language is …

Member Avatar for coroneshotel2
0
598
Member Avatar for harsha_123

Get imgburn. It's free. Build a recovery set of files from your two discs, then use Imgburn to create an image [an .iso file] from them on your hdd [Create image file from files/folders]. Default settings should work; extract boot files from one of the recovery discs. Creating a bootable …

Member Avatar for gerbil
0
263
Member Avatar for jrmcrl_morales

Skip infection checks... no way is that 8400 GS a gaming card. It is not anywhere near the min requ for Proto2... http://www.hwcompare.com/7109/geforce-8400-gs-512mb-vs-geforce-gt-430/ But you have it; if you set the lowest graphics res your monitor can stand [640x] then you might get a playable framerate. Might. It was only …

Member Avatar for gerbil
0
356
Member Avatar for GiddyupGilbert

You might run GMER, OTL to give us a lead, a chance. OldTimer Listit. Luckily for you, it sounds like a dud malware. Then again, maybe only that bit is dud...

Member Avatar for oalee
0
94
Member Avatar for lynn.scott.731

Press the Start button, choose Run, and paste into the Run box.. control sysdm.cpl,,3 Or go Control Panel, System, and choose Advanced tab. There select Startup and Recovery Settings button, on that page deselect the Automatically restart checkbox. You system should now sutdown correctly. Your problem likely arose because upon …

Member Avatar for Palebushman
0
321
Member Avatar for somjit{}

To enlarge... The ATA-6 /Ultra DMA100 standard provides for a 48 bit LBA address space for sectors [Ultra DMA133 is just faster], so that is the current *hardware* limit, I believe. 2^48 * 512B sector size = 144 * 10^15, or 128 * 2^50. That is 128PB. 2^50 is a …

Member Avatar for Palebushman
0
214
Member Avatar for luis.torrente.10

luis, CP Add/Remove reads the registry key entries at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\. If an application is listed there [a key entry] with a DisplayName value then it will appear in A/R Pgms. If the key contains a value Uninstallstring then the Uninstall tab will appear alongside in A/R Pgms. If the actual …

Member Avatar for luis.torrente.10
0
125
Member Avatar for Its.Obi

You're the chap who drives past, thinking there's a reasonably good chance of making it to the next petrol station.... Samsung may have a tool to "repair" bad sectors on their drives, but you are wise to backup all data before hand. That takes another drive. SMART will likely by …

Member Avatar for Reverend Jim
0
447
Member Avatar for Violet_82

Asus? Likely AMI BIOS, then. Here is a list of AMI beep codes: http://www.bioscentral.com/beepcodes/amibeep.htm 1L2S is a vid BIOS problem, 2S is RAM. Hmmm. I'm going to guess that you disturbed your RAM block; that could be reflected in the video problem [video uses some RAM]. Open up, reseat your …

Member Avatar for gerbil
0
219

The End.